src/sys/stash/meta/stash_secure.cmx

{
    "program": {
        "args": [
            "--secure",
            "--backing_file",
            "/data/stash_secure.store"
        ],
        "binary": "bin/app"
    },
    "sandbox": {
        "features": [
            "isolated-persistent-storage"
        ],
        "services": [
            "fuchsia.logger.LogSink"
        ]
    }
}